Job Description – SPS Cyber Security Analyst (IAM, Log Management & PAM) Organization Overview

Société Générale is one of the leading European financial services groups. Based on a diversified and integrated banking model, the Group combines financial strength and proven expertise in innovation with a strategy of sustainable growth, aiming to be the trusted partner for its clients, committed to the positive transformations of society and the economy.

Set up in 2000, Société Générale Global Solution Centre (SG GSC), a 100% owned subsidiary of Société Générale has over 12,000 employees across its Bangalore and Chennai facilities in India. The subsidiary is focused on Application Development and Maintenance, Infrastructure Management, Business Process Management and Knowledge Process Management, to Société Générale’s business lines across the world with focus on an outcome-based business approach.

We are an employee focused organization; known for the extensive opportunities we provide for career progression and development.

We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Website: https://globalsolutioncenter.societegenerale.in/en/

Purpose of the Role

This position handles primary duties including but not limited to work collectively and in collaboration with a team of Cyber Security Analysts in Central Function Team of Société Générale.

The role incumbent is expected to: • Contribute as Senior Analyst / analyst on IAM & CyberArk onboarding. Deployment of IT security solutions such as (IAM, CyberArk, Imperva, Log Management to name a few)

Responsibilities in the Role

The role incumbent, as Sr Analyst / Analyst (IAM) supporting Business Pillar

• Foundation Security Management o Analyze and assist feature team on IAM onboarding, Detailed User Access Review (DUAR), Digital IAM Audit & Reporting (DIAMAR) onboarding request handling.

o Analyze and assist on Secure Bounce / PAM solutions team.

o Establish connect with scoped Application teams and debrief the Application teams on the proposed activity, such as Application onboarding to CyberArk and bypass monitoring, the purpose of this implementation and why it is important?

o Complete understanding of Application onboarding to CyberArk, IAM, bypass log monitoring, File Beat installation for log forwarding, Log synthesis and review, Applicative and Technical Log Management, Federated Access to Application, Data Access Model (DAM) to understand the access structure, Data and User Access Review

o Understand the complete eco-system to brief the Application teams and provide necessary support during implementation and liaise with technical teams to resolve the issue

o Plan, organise and insure follow up actions and action plans, therefore being autonomous is a must for this role

o Should be able to correctly report to management and maintain a good level of communication with different stakeholders of the projects assisting functional and technical teams throughout the major evolutions on platforms and applications. This focus will be a big part of the scope of work and requires understanding of the architecture, functionalities, and security policies o Improve and maintain the level of security of applications and platforms in compliance with regulatory requirement and SG group security criteria

• Governance

o Review of key programs for compliance to NIST, ROSI & ECB recommendations & guidelines. o Regular review of FSM (Foundation Security Team- Cloud) & SPS (IAM, PAM) teams.

• People

o Work as team player within SPS team and o Understand, coordinate, and collaborate with IAM, PAM & Cybersecurity team members.

o Have a vision for career path in the team. o Provide constructive feedback.

• Stakeholder Management

o Develop and maintain a strong connect with stakeholders. o Anticipate the client needs to maintain an excellent relationship. o Build effective synergy with cross-functional units.

• Explore and use of emerging technologies like AI/ML accelerate transformation.

• Culture o Foster a collaborative team spirit.

o Adhere to groups managerial practices. o Challenge the status quo and encourage innovative culture.

o Ingrain the service culture postures in the team – Curiosity, constructiveness, and solidarity.

o Demonstrate SG group values as role model for team to follow.

o Focus on collective department success. Qualifications

• A good academic background - B.Tech or equivalent degree in IT/Computer science. Cyber Security or Information Technology stream

• 2-10 years of experience in Cybersecurity, IAM onboarding & PAM solutions.

• Broad understanding of IT landscape, Applications, Technologies, and infra solutions. Additional Qualifiers

• Excellent presentation and analytical skills

• Desired functional or domain certifications

• Basic degree in Engineering or Masters in Information systems.

• Advance level of people management skills

• Collaboration and Stakeholder management skills Abilities/Skills required

• Strong customer service ethos

• Logical, structured approach to planning, problem solving and decision-making.

• Good understanding of basic accounting

• Self-starter with ability to manage own workload and deliverables along with others.

• Good communication skills, especially the ability to persuade and influence others.

• Excellent analytical skills

. • Ability to be flexible, organize and prioritize work.

• Attention to detail, plus excellent organizational and time management skills.

• Knowledge of or exposure to target markets.

• Highly developed relationship management skills.

• Expert negotiation and influencing skills.

• Team motivational skills.

• Ability to work under pressure and to fixed deadlines.

• Out of box thinking.

• Quick understanding of upstream and downstream linkage. Additional Skills (Nice to Have)

• Worked on Application Security, Software development security, Risk Analysis and Security Recommendation. DB Security Testing. Derogations etc,

• Development knowledge. Worked in SDLC.

• Experience in working on projects in Agile Methodology

• French Language – A1/A2 DELF certified. Writing and Speaking skills. Specific Context Additional Skills.

Societe Generale Global Solution Centre

More Information